Description
Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 2
- Telesquare SDT-CW3B1 1.1.0 - OS Command Injection EDB-50948 · remote · Jun 3, 2022
- SDT-CW3B1 1.1.0 - OS Command Injection EDB-50936 · remote · May 17, 2022
GitHub 13 repositories · most starred shown
-
Awei507/CVE-RCE ★ 3 · Oct 15, 2022
CVE-2021-46422漏洞
-
yyqxi/CVE-2021-46422 ★ 2 · Oct 16, 2022
CVE-2021-46422poc
-
Chocapikk/CVE-2021-46422 ★ 2 · Jun 20, 2022
Telesquare SDT-CW3B1 1.1.0 - OS Command Injection
-
xanszZZ/SDT_CW3B1_rce ★ 1 · Oct 16, 2022
批量检测CVE-2021-46422 RCE漏洞
-
latings/CVE-2021-46422 ★ 1 · Oct 16, 2022
CVE-2021-46422
-
kailing0220/CVE-2021-46422 ★ 1 · Oct 16, 2022
Telesquare SDT-CW3B1 1.1.0 版本存在操作系统命令注入漏洞。远程攻击者可利用该漏洞在无需任何身份验证的情况下执行操作系统命令。
-
polerstar/CVE-2021-46422-poc ★ 1 · Oct 16, 2022
漏洞检测
-
nobodyatall648/CVE-2021-46422 ★ 1 · May 24, 2022
SDT-CW3B1 1.1.0 - OS Command Injection
-
yigexioabai/CVE-2021-46422_RCE ★ 0 · Oct 15, 2022
-
twoning/CVE-2021-46422_PoC ★ 0 · Jul 14, 2022
CVE-2021-46422_PoC
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- SDT-CW3B1 1.1.0 - OS Command Injection http/cves/2021/CVE-2021-46422.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.